Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/354430-54bc-455e-b0d1-7cd508f73364/1/j5pGcBRq2IDxS62ksnYrYT3fHRg.mft
File: j5pGcBRq2IDxS62ksnYrYT3fHRg.mft (raw, json)
Hash identifier: cn0kpmd6NyktOUhxnfiX0FNFJosrsCZeKB/izJgdK7M=
Subject key identifier: C5:25:75:73:3F:7A:18:22:87:C9:29:32:4D:CC:06:0B:0A:0C:B0:DB
Authority key identifier: 8F:9A:46:70:14:6A:D8:80:F1:4B:AD:A4:B2:76:2B:61:3D:DF:1D:18
Certificate issuer: /CN=8f9a4670146ad880f14bada4b2762b613ddf1d18
Certificate serial: 0196CDCF4F0555F2FED9B07BFC535A691A66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j5pGcBRq2IDxS62ksnYrYT3fHRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/354430-54bc-455e-b0d1-7cd508f73364/1/j5pGcBRq2IDxS62ksnYrYT3fHRg.mft
Manifest number: 0B75
Signing time: Wed 14 May 2025 08:00:37 +0000
Manifest this update: Wed 14 May 2025 08:00:37 +0000
Manifest next update: Thu 15 May 2025 08:00:37 +0000
Files and hashes: 1: UbUeMfpLDU2B5tdTAaw2aWanYxE.roa (hash: tdkyhyzbAK1xvoMt58nvdU/zMVFNztmsRhNZhHaMbYQ=)
2: j5pGcBRq2IDxS62ksnYrYT3fHRg.crl (hash: L5j1zWPAGL0SSVeKnebqqkyyyALGE+qMmuyAWXY5WiM=)
3: ymEXcJVVoGyICrDxKsSN1clsK5E.roa (hash: AJjBik7pMke5JpIJlFEXV/dLTYXuYObLdzj39aIHrMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/354430-54bc-455e-b0d1-7cd508f73364/1/j5pGcBRq2IDxS62ksnYrYT3fHRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/354430-54bc-455e-b0d1-7cd508f73364/1/j5pGcBRq2IDxS62ksnYrYT3fHRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/j5pGcBRq2IDxS62ksnYrYT3fHRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 08:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cd:cf:4f:05:55:f2:fe:d9:b0:7b:fc:53:5a:69:1a:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f9a4670146ad880f14bada4b2762b613ddf1d18
Validity
Not Before: May 14 08:00:37 2025 GMT
Not After : May 15 08:00:37 2025 GMT
Subject: CN=c52575733f7a182287c929324dcc060b0a0cb0db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ce:07:83:63:e9:10:af:96:7f:6d:d0:31:de:
a6:f2:f6:22:34:24:dc:cf:da:e7:f1:4a:32:6b:8d:
c7:8e:0a:2c:1c:a2:13:3a:98:65:bb:0c:14:b0:4a:
d0:0a:2b:a9:a5:6d:c8:bb:ba:c6:7e:7e:16:18:52:
66:63:ce:31:fc:66:6e:5b:31:72:b9:72:cf:3f:61:
7a:83:fe:8c:74:4f:53:0b:5f:c9:41:84:b6:19:41:
d7:88:d7:fa:4a:2c:af:55:ac:38:23:9b:d0:00:ed:
5d:8f:d2:30:50:e2:d5:0a:1f:40:3a:d8:8d:e4:34:
d9:c9:13:e0:04:23:c6:27:50:19:a9:f9:d6:6a:07:
6a:2a:21:c2:2c:f7:a6:8f:d8:62:00:a1:c9:b5:db:
16:2e:5b:d4:f3:24:13:6d:98:a7:82:b4:d6:a8:23:
be:2f:e4:51:23:bd:30:84:ae:5a:ef:87:58:a0:18:
65:cc:6c:a0:fc:5e:ed:63:04:98:2f:87:f4:43:e5:
93:40:60:d0:3f:9d:ae:c1:e7:0d:b2:e2:f8:f7:8c:
13:32:49:c7:05:37:4b:ad:60:12:e4:bd:b1:74:6e:
30:bd:82:21:09:35:34:b5:7e:a2:1f:af:0b:b5:ea:
5a:8d:24:d8:eb:4f:4b:35:06:07:fb:e2:0a:f8:e1:
60:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:25:75:73:3F:7A:18:22:87:C9:29:32:4D:CC:06:0B:0A:0C:B0:DB
X509v3 Authority Key Identifier:
keyid:8F:9A:46:70:14:6A:D8:80:F1:4B:AD:A4:B2:76:2B:61:3D:DF:1D:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j5pGcBRq2IDxS62ksnYrYT3fHRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/354430-54bc-455e-b0d1-7cd508f73364/1/j5pGcBRq2IDxS62ksnYrYT3fHRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/354430-54bc-455e-b0d1-7cd508f73364/1/j5pGcBRq2IDxS62ksnYrYT3fHRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:a5:5b:2f:98:3d:4a:df:1f:3b:6e:a8:d2:43:0e:f4:99:da:
e3:00:98:78:1c:96:d2:2c:5f:d3:fe:75:e1:5f:43:d3:50:8d:
d4:dc:0e:5b:60:e2:c0:83:2e:5b:a6:13:25:13:fd:b8:21:ee:
d6:ec:34:9d:b3:2e:ac:07:4d:43:a2:d4:fb:53:42:10:14:d4:
14:d1:53:b0:e3:a1:3e:67:65:78:dd:e6:13:72:d9:f6:75:8f:
14:21:b7:08:9e:dd:30:0f:0e:1b:0a:14:09:93:58:a3:bd:45:
44:7f:c3:9b:51:fd:32:cb:2b:ff:56:8b:e5:cb:ea:f0:4e:d0:
c7:00:48:85:f7:3f:b8:49:44:2b:3d:d5:27:96:e6:a3:61:87:
b4:f8:f7:96:5b:1e:7c:e7:17:4d:86:ea:f1:3d:27:eb:55:c9:
46:3e:01:bc:7a:c9:d3:9b:5b:91:09:cd:80:e1:e7:9b:7d:60:
2c:47:ed:b4:44:79:ce:85:b9:98:8a:bf:e9:b3:60:4f:cb:20:
2a:0b:01:d7:4e:bb:8b:bf:43:50:53:e7:b1:0f:11:18:e9:dc:
41:3e:d7:82:4e:8d:7f:c4:e7:41:9c:1a:b3:15:6f:b3:24:be:
eb:33:52:43:d6:1d:e9:24:d7:44:aa:82:3b:2f:6b:f1:58:9e:
38:07:7c:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 15:22:40 2025 by rpki-client